Privacy Policy


Updated on 23.11.2021

1.General
UDi access app, further referred to as “the app” or “UDi access” is owned The Executive Agency for Higher Education, Research, Development and Innovation Funding, based in Romania, Bucharest ,Str. Mendeleev nr. 21-25, Sector 1, postal code 010362. The Executive Agency for Higher Education, Research, Development and Innovation Funding, further referred to as “UEFISCDI” or “Us”, is the data controller of the personal data submitted and processed by using Udi access. We process the personal data provided by you, further referred to as “The User” or “You”, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).


2.What personal data we collect?
We collect information inside the app directly provided by you through the registration process and it consists in name, email address and phone number. The information we collect automatically when you use Udi access consists in: log data – information collected automatically by our servers, device information – depending on what type of device you are using and its pe , we may collect information about what type of device you are using, what operating system you are using, device settings, application IDs, unique device identifiers, and crash data; geolocation information – IP addresses and geo location data received from your browser or device may be used to determine approximate location.UDi access app, further referred to as “the app” or “Udi access” is owned The Executive Agency for Higher Education, Research, Development and Innovation Funding, based in Romania, Bucharest ,Str. Mendeleev nr. 21-25, Sector 1, postal code 010362. The Executive Agency for Higher Education, Research, Development and Innovation Funding, further referred to as “UEFISCDI” or “Us”, is the data controller of the personal data submitted and processed by using Udi access. We process the personal data provided by you, further referred to as “The User” or “You”, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).


3. Why do we collect and process the data?
Depending on the type of data collected, we have several purposes for collecting the data:

3.1. In order to deliver our services to you.
3.2. We may process your personal data in order to fulfill legal obligations imposed by authorities, as exemplified in section 4 of this policy.
3.3. We may process your personal data for the purpose of legitimate interest of UEFISCDI and third parties, provided that such legitimated interest does not override interests or fundamental rights and freedoms of the User, for the purposes of establishment, exercise or defense of our legal claims, protect ours or third party’s rights, or for the purpose of reorganization.We collect information inside the app directly provided by you through the registration process and it consists in name, email address and phone number. The information we collect automatically when you use Udi access consists in: log data – information collected automatically by our servers, device information – depending on what type of device you are using and its pe , we may collect information about what type of device you are using, what operating system you are using, device settings, application IDs, unique device identifiers, and crash data; geolocation information – IP addresses and geo location data received from your browser or device may be used to determine approximate location.UDi access app, further referred to as “the app” or “Udi access” is owned The Executive Agency for Higher Education, Research, Development and Innovation Funding, based in Romania, Bucharest ,Str. Mendeleev nr. 21-25, Sector 1, postal code 010362. The Executive Agency for Higher Education, Research, Development and Innovation Funding, further referred to as “UEFISCDI” or “Us”, is the data controller of the personal data submitted and processed by using Udi access. We process the personal data provided by you, further referred to as “The User” or “You”, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).


4. To whom might we disclose your personal data?
We do not sell, trade or rent your personal information to others. We may provide your personal data on a strict need-to-know basis, and only when it’s necessary to the following third parties:
1. authorities or public institutions, including courts, such us tribunals, regulators, accountants, auditors, or other external consultants to the extent it is required to: (a) fulfill legal obligations imposed UEFISCDI; (b) protect and pursue UEFISCDI’s, the other User’s or third party rights, including intellectual property rights; (c) protect the UEFISCDI’s, other User’s or third party’s security; (d) perform and execute the rights and obligations provided in the Terms and Conditions;
2. where it’s in our legitimate interest to manage or grow our organization advisors and consultants for the purpose of an eventual reorganization.
We will never disclose your personal information to a third party, with the exception of UEFISCDI employees and collaborators authorised and authorised service providers (hosting, accounting) required to process this information on our behalf or if the data disclosure represents a legal obligation of UEFICSDI, our employees or the persons authorised.


5. What are your rights as the User in relation to personal data?
1. The right to be informed – it’s in your rights to know, even from the point of collection, what data is collected, how will your data be used, to whom will your data be transferred or divulged and your rights regarding your personal data.

2. The right to access the personal data collected about you – you have the right to know if your personal data is being processed and to get access to the data collected.

3. The right to rectification of inaccurate personal data – you have the right to change or add to it if your personal data processed is inaccurate or out-of-date.

4. The right to erasure of all data stored (right to be forgotten) – you have the right to request and obtain from us the deletion of all personal data collected concerning you, without undue delay. The only exceptions to this concern the data that is used for statistical purposes, to exercise a legal obligation or to state or defend a right in a court of law.

5. The right to restriction of processing of personal data – you have the right to restrict the processing of your personal data for a certain period of time, without having it deleted, by sending us a request in this regard, if you need that data for establishing, exercising or defending a right in court.

6. The right to data portability – you have the right to receive from us the data that you provided us and give your data to another data controller without opposition or delay.

7. The right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you .

8. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except if it is necessary for enforcing a contract between you and us, it is authorised by the European Union or the state law and which also lays down suitable measures to safeguard your or it is based on your explicit consent.

You can exercise these rights by contacting UEFISCDI, by email at support@uefiscdi-direct.ro.

We will respond to your request within 28 days and we can extend this term for specific reasons, related to the complexity of your request. In all cases, if this period is extended, we will inform you about the extension period and the reasons that led to it.
If we cannot give you access to your data, either for legal reasons or because the identifiers provided by you are not sufficient, we will inform you in due time, having the possibility to offer additional information, or, if the case informing you on the reasons for the refusal.


6. Data Security
We commit to maintaining the security of your data and to ensure that appropriate measures are taken against unlawful or unauthorized processing of personal data, against the accidental loss of, or damage to, personal data, by putting in place the appropriate hardware and software security measures and enforcing the appropriate procedures to maintain the security of all personal data from the point of collection to the point of deletion, including keeping your information confidential by allowing only the authorized people to access the personal data provided.


7. Data retention period
If legally required or if it is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our Terms and Conditions, we may also retain some of your information for a limited period of time as required, even after is no longer needed to provide the services to you.


8. Changes in the information note
Please note that we are committed to constantly reviewing how we process and protect data. Therefore, changes to our policy may occur at any time. We reserve the right to modify our privacy practices and update and make changes to this policy at any time. For this reason, we encourage you to return to this note at all times. This document is current from the date that appears at the top of the document. We will treat your personal data in a manner compatible with the confidentiality notification under which it was collected, unless we have your consent to treat them differently.


9. Information about the Romanian National Authority for Data Protection (AUTORITATEA NAȚIONALĂ PENTRU SUPRAVEGHEREA PRELUCRĂRII DATELOR CU CARACTER PERSONAL – ANSPDCP)
If you consider that your rights, as reflected in the General Data Protection Regulation were infringed, you can file a complaint with ANSPDPC.

Contact data for ANSPDCP are the following:

Address: București, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod poștal 010336
Phone: +40.318.059.211/+40.318.059.212
Fax: +40.318.059.602
E-mail: anspdcp@dataprotection.ro
Webpage: www.dataprotection.ro
UEFISCDI
Terms&Conditions